80 matches found
PT-2026-6284
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, predictable verification hashes may allow attackers to guess verification tokens and potentially verify election account requests without authorization. This issue has been patched in version 1.33.0...
CVE-2020-10241
An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of comtemplates lead to CSRF...
EUVD-2017-18844
Malware in sbrugna...
EUVD-2020-2696
Malware in sbrugna...
EUVD-2020-29286
Malware in sbrugna...
EUVD-2024-1895
Malicious code in bioql PyPI...
CVE-2020-13760
In Joomla! before 3.9.19, missing token checks in compostinstall lead to CSRF...
CVE-2020-8419
An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities...
BIT-JOOMLA-2020-8419
An issue was discovered in Joomla! before 3.9.15. Missing token checks in the batch actions of various components cause CSRF vulnerabilities...
BIT-JOOMLA-2020-13760
In Joomla! before 3.9.19, missing token checks in compostinstall lead to CSRF...
BIT-JOOMLA-2020-10241
An issue was discovered in Joomla! before 3.9.16. Missing token checks in the image actions of comtemplates lead to CSRF...
Moodle 安全漏洞
Moodle is Moodle open source set of free e-learning software platform, also known as course management system, learning management system or virtual learning environment. Moodle suffers from a cross-site request forgery vulnerability that stems from the presence of incorrect CSRF token checks in...
jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with []string{} for m["aud"] (which is allowed by the specification). Because the type assertion fails "" is the value of aud. This is a security problem if the JWT token is presented to a service that lacks its own audience check.
...
Moodle CSRF risks due to misuse of confirm_sesskey
Incorrect CSRF token checks resulted in multiple CSRF risks...
GHSA-356G-7X36-7M34 Moodle CSRF risks due to misuse of confirm_sesskey
Incorrect CSRF token checks resulted in multiple CSRF risks...
CVE-2024-38276
Incorrect CSRF token checks resulted in multiple CSRF risks...
UBUNTU-CVE-2024-38276
Incorrect CSRF token checks resulted in multiple CSRF risks...
CVE-2024-38276
Incorrect CSRF token checks resulted in multiple CSRF risks...
CVE-2024-38276 moodle: CSRF risks due to misuse of confirm_sesskey
Incorrect CSRF token checks resulted in multiple CSRF risks...
CVE-2024-38276
CVE-2024-38276 is a Moodle CSRF risk caused by incorrect CSRF token checks (confirm_sesskey misuse) leading to multiple CSRF vulnerabilities. Affected: Moodle (server-side web app, CMS). Underlying issue: CSRF protection checks are insufficient, enabling unauthorized actions without proper user i...